bloofoxCMS version 0.5.0 suffers from a cross site scripting vulnerability.